In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd: don't allow mapping the MMIO HDP page with large pages
We don't get the right offset in that case. The GPU has an unused 4K area of the register BAR space into which you can remap registers. We remap the HDP flush registers into this space to allow userspace (CPU or GPU) to flush the HDP when it updates VRAM. However, on systems with >4K pages, we end up exposing PAGE_SIZE of MMIO space.
{ "vanir_signatures": [ { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-0908c2c6", "digest": { "function_hash": "148338608512578687660067277804693911250", "length": 2477.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-127200ea", "digest": { "threshold": 0.9, "line_hashes": [ "191281118086488840599818173780859633839", "242207925739642988130936173079891863625", "224388810390554231875704036110817238038", "158745614680670818449698404517494519655", "264538734363076980491348760852877234285", "88888833777260779350198377802632803481", "247970776614786209335294988528355124606" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-35c38ecb", "digest": { "function_hash": "13205407029700738070013369938150798060", "length": 790.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "criu_restore_memory_of_gpu" }, "id": "CVE-2024-41011-46541689", "digest": { "function_hash": "147195105718322529335578854354104039994", "length": 1984.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-5d7ab4a8", "digest": { "threshold": 0.9, "line_hashes": [ "53877070728321225611235196427122550392", "121577784165147536236816403344544892338", "161487441743810418761542215002567600802", "317680843711168311571426295011669945770", "264538734363076980491348760852877234285", "88888833777260779350198377802632803481", "247970776614786209335294988528355124606" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-60e8214c", "digest": { "threshold": 0.9, "line_hashes": [ "279869800053158290821130107635078929344", "283136802063970751010683576431455547263", "154218660261956404716025642732149289262", "317680843711168311571426295011669945770", "244464576155035101539686798347796833332", "250215007003170846905393954651288694989", "33639489811497800661885264237877376915", "298492128613941032089182288156242233291", "82618273235823423293883384478965608619", "307467833906456695610854490333758873384", "66956679258079157547236578047305110640" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-61ccb43a", "digest": { "function_hash": "13205407029700738070013369938150798060", "length": 790.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-6397c881", "digest": { "function_hash": "311542166862117692719889554606468620724", "length": 1596.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-64d8de92", "digest": { "threshold": 0.9, "line_hashes": [ "279869800053158290821130107635078929344", "283136802063970751010683576431455547263", "154218660261956404716025642732149289262", "317680843711168311571426295011669945770", "244464576155035101539686798347796833332", "250215007003170846905393954651288694989", "33639489811497800661885264237877376915", "298492128613941032089182288156242233291", "82618273235823423293883384478965608619", "307467833906456695610854490333758873384", "66956679258079157547236578047305110640" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "criu_restore_memory_of_gpu" }, "id": "CVE-2024-41011-6d08d3e9", "digest": { "function_hash": "147195105718322529335578854354104039994", "length": 1984.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-7c1eb394", "digest": { "function_hash": "13205407029700738070013369938150798060", "length": 790.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-85971e03", "digest": { "function_hash": "119469853277926499792134807310305396098", "length": 2823.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-875bd526", "digest": { "function_hash": "67260149033847925924787900398598203329", "length": 1727.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-8c833b1a", "digest": { "threshold": 0.9, "line_hashes": [ "53877070728321225611235196427122550392", "121577784165147536236816403344544892338", "161487441743810418761542215002567600802", "317680843711168311571426295011669945770", "264538734363076980491348760852877234285", "88888833777260779350198377802632803481", "247970776614786209335294988528355124606" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@009c4d78bcf07c4ac2e3dd9f275b4eaa72b4f884", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-8ded06df", "digest": { "function_hash": "273603578235697340419367905634496996944", "length": 800.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@6186c93560889265bfe0914609c274eff40bbeb5", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "criu_restore_memory_of_gpu" }, "id": "CVE-2024-41011-8ebd94f8", "digest": { "function_hash": "147195105718322529335578854354104039994", "length": 1984.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "criu_restore_memory_of_gpu" }, "id": "CVE-2024-41011-96165781", "digest": { "function_hash": "116717297230274835288799022195343995011", "length": 1977.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-a87a6ffc", "digest": { "threshold": 0.9, "line_hashes": [ "279869800053158290821130107635078929344", "283136802063970751010683576431455547263", "154218660261956404716025642732149289262", "317680843711168311571426295011669945770", "244464576155035101539686798347796833332", "250215007003170846905393954651288694989", "33639489811497800661885264237877376915", "298492128613941032089182288156242233291", "82618273235823423293883384478965608619", "122135798286264486396070333045791577304", "267612808325266705214987711704781619533" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724", "signature_type": "Line", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c" }, "id": "CVE-2024-41011-c4782973", "digest": { "threshold": 0.9, "line_hashes": [ "279869800053158290821130107635078929344", "283136802063970751010683576431455547263", "154218660261956404716025642732149289262", "317680843711168311571426295011669945770", "244464576155035101539686798347796833332", "250215007003170846905393954651288694989", "33639489811497800661885264237877376915", "298492128613941032089182288156242233291", "82618273235823423293883384478965608619", "307467833906456695610854490333758873384", "66956679258079157547236578047305110640" ] }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@f7276cdc1912325b64c33fcb1361952c06e55f63", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-cac005ea", "digest": { "function_hash": "201802492402534673983873241326846130818", "length": 800.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@be4a2a81b6b90d1a47eaeaace4cc8e2cb57b96c7", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-dbccbfed", "digest": { "function_hash": "119469853277926499792134807310305396098", "length": 2823.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-e2b09aa0", "digest": { "function_hash": "201802492402534673983873241326846130818", "length": 800.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@4b4cff994a27ebf7bd3fb9a798a1cdfa8d01b724", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-f39c1dd9", "digest": { "function_hash": "119469853277926499792134807310305396098", "length": 2823.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8ad4838040e5515939c071a0f511ce2661a0889d", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_ioctl_alloc_memory_of_gpu" }, "id": "CVE-2024-41011-f5adbfe5", "digest": { "function_hash": "185675762006906157099830299134249730990", "length": 1751.0 }, "deprecated": false, "signature_version": "v1" }, { "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@89fffbdf535ce659c1a26b51ad62070566e33b28", "signature_type": "Function", "target": { "file": "drivers/gpu/drm/amd/amdkfd/kfd_chardev.c", "function": "kfd_mmio_mmap" }, "id": "CVE-2024-41011-f726e649", "digest": { "function_hash": "252457185779218980627973885040505131252", "length": 790.0 }, "deprecated": false, "signature_version": "v1" } ] }